Security issue with Java-WebSocket:1.3.8